CVE-2024-12610 in School Management System Plugin
要約
〜によって MITRE • 2025年03月07日
The School Management System for Wordpress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'mj_smgt_remove_feetype' and 'mj_smgt_remove_category_new' AJAX actions in all versions up to, and including, 93.0.0. This makes it possible for unauthenticated attackers to delete arbitrary posts.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.